CVE-2015-3212: Race Condition
A flaw was found in the Linux kernels handling of the SCTPs automatic handling of dynamic multi-homed connections. A race condition in the way the Linux kernel handles lists of associations in SCTP sockets using Address Configuration Change messages, leading to list corruption and panics.
References: http://marc.info/?l=linux-netdev&m=143277436124732&w=2
Commit: https://git.kernel.org/linus/2d45a02d0166caf2627fe91897c6ffc3b19514c4
Other sources
Race condition in net/sctp/socket.c in the Linux kernel before 4.1.2 allows local users to cause a denial of service (list corruption and panic) via a rapid series of system calls related to sockets, as demonstrated by setsockopt calls.
— Launchpad
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2015-3212?
CVE-2015-3212 is considered a high-severity vulnerability due to the potential for list corruption and kernel panics.
How do I fix CVE-2015-3212?
To fix CVE-2015-3212, update to kernel versions 5.10.223-1, 5.10.226-1, 6.1.123-1, 6.1.128-1, 6.12.12-1, or 6.12.13-1.
What systems are affected by CVE-2015-3212?
CVE-2015-3212 affects the Linux kernel versions up to and including 4.1.1.
What type of vulnerability is CVE-2015-3212?
CVE-2015-3212 is a race condition vulnerability in the Linux kernel's handling of SCTP sockets.
When was CVE-2015-3212 reported?
CVE-2015-3212 was reported in 2015 and is related to issues in the handling of dynamic multi-homed connections.